Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDFD12CADAF911EF98E9D755762E951A.roa
File: CDFD12CADAF911EF98E9D755762E951A.roa (raw, json)
Hash identifier: 7HpKVhhnbj+hdyClLoL1w91Rgagpc1Pu4cJuaY4sas8=
Subject key identifier: 19:9B:E3:8E:18:DE:A8:7A:5D:0D:25:A9:A0:73:99:D8:E1:D9:06:79
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011195
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDFD12CADAF911EF98E9D755762E951A.roa
Signing time: Sat 25 Jan 2025 08:53:11 +0000
ROA not before: Sat 25 Jan 2025 08:53:07 +0000
ROA not after: Sun 23 Feb 2025 08:53:07 +0000
asID: 44559
IP address blocks: 156.246.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70037 (0x11195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 08:53:07 2025 GMT
Not After : Feb 23 08:53:07 2025 GMT
Subject: CN=6794a677-1d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a0:59:61:69:61:48:65:14:8c:28:c3:bc:77:
85:bf:f8:44:48:2b:90:ca:be:58:98:05:07:b7:3f:
b5:87:47:88:ea:81:01:9c:49:98:b1:fa:23:8d:88:
a9:f0:59:99:d5:1d:25:63:b1:1b:5c:26:90:b0:c9:
20:81:0c:4e:ab:8e:4b:7c:b6:cc:6d:87:7d:1d:0d:
dc:b2:0d:73:75:8c:af:05:e0:c0:6b:ab:e6:5f:6b:
11:b3:32:87:b2:cd:38:8e:14:58:b5:03:6b:aa:6e:
fd:dd:6f:39:7d:fc:fd:36:f2:96:cb:91:d3:08:b1:
3b:6e:5a:70:ca:36:b9:c3:d5:65:72:32:a5:60:04:
8f:18:9d:47:0a:d7:a8:57:2e:dc:51:15:1b:41:17:
7e:1a:e6:8e:46:e1:50:cd:ee:aa:b1:66:be:8a:37:
68:e4:7f:b9:27:0a:78:9c:74:a7:a7:91:cb:2c:bf:
89:f0:2f:aa:a9:41:dc:58:f7:0f:47:8f:a5:81:e6:
f3:9a:48:3a:0e:09:24:42:1c:46:d9:67:57:79:d3:
c3:26:22:f1:ae:89:a3:c4:52:f4:62:65:da:be:bf:
6e:4c:28:86:79:d7:aa:1a:f7:f6:5d:fd:7f:50:af:
5f:e2:42:61:7f:d2:f8:21:b2:a6:00:eb:f4:e0:f9:
85:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9B:E3:8E:18:DE:A8:7A:5D:0D:25:A9:A0:73:99:D8:E1:D9:06:79
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDFD12CADAF911EF98E9D755762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.253.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:f1:cd:b1:e3:d2:91:83:49:88:d0:a2:55:03:9e:e8:52:b3:
83:c9:b3:7d:ad:de:7b:10:09:3b:ae:38:3e:c9:68:53:94:7d:
c9:9b:a3:14:03:47:4f:59:38:45:7a:35:f9:75:04:27:de:aa:
72:b2:9f:4e:fd:70:a9:55:3b:21:06:ad:79:44:e7:1e:6e:94:
c9:5e:6b:28:bc:ef:f0:3d:7f:fb:47:a8:47:e0:aa:ed:16:67:
3b:04:e5:61:c3:04:2d:d2:7a:59:08:db:0d:84:8a:a4:2e:3b:
8c:8f:3b:1a:df:6b:e9:d7:2e:0e:df:81:d7:aa:d0:43:a4:bb:
6c:44:b9:32:18:05:54:4f:39:f3:07:a5:9c:67:ca:1c:9d:bd:
74:e5:99:cd:b8:5c:86:5c:51:55:45:da:dc:a1:76:58:48:85:
41:04:d9:21:0f:87:89:fc:0c:b5:a3:ea:da:9e:0f:48:72:72:
5a:2a:be:e9:e4:78:8d:1e:23:09:69:9a:a2:ae:d9:24:ac:f6:
af:c4:a0:68:8c:98:a5:be:a1:ec:45:f8:b1:30:a5:b4:14:c9:
a9:8d:e0:d2:28:7c:65:35:39:af:70:7e:f5:76:81:30:61:db:
e5:88:99:80:0f:64:65:5f:60:43:ee:09:8b:5f:87:ca:95:6a:
37:e1:47:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:02:11 2025 by rpki-client